The core open-source belief that enough human experts will find all bugs is invalidated by AI discovering decades-old vulnerabilities in widely scrutinized code. This proves that high-level machine analysis is now essential for security, as human review alone is insufficient.

A key disincentive for open-sourcing frontier AI models is that the released model weights contain residual information about the training process. Competitors could potentially reverse-engineer the training data set or proprietary algorithms, eroding the creator's competitive advantage.

Contrary to common belief, having full model weights ('white-box') access isn't a clear winner over sophisticated black-box methods for safety testing. Geoffrey Irving states that rigorous chain-of-thought analysis can be nearly as revealing, meaning transparency demands should focus on more than just weight access.

As powerful open-source AI models from China (like Kimi) are adopted globally for coding, a new threat emerges. It's possible to embed secret prompts that inject malicious or corrupted code into software at a massive scale. As AI writes more code, human oversight becomes impossible, creating a significant vulnerability.

The rapid adoption of AI has led to a critical security failure. Enterprises have no idea how many AI models are running in their environments, how secure they are, or if they contain backdoors. Like aviation before the TSA, security is a complete afterthought in the new AI stack.

NVIDIA's CEO Jensen Huang argues that closed AI models create single points of failure and concentrate risk. True AI safety emerges from open-weight models, where a broad community of researchers can inspect, 'red team,' and fix vulnerabilities, making transparency more secure than obscurity.

A common misconception is that Chinese AI is fully open-source. The reality is they are often "open-weight," meaning training parameters (weights) are shared, but the underlying code and proprietary datasets are not. This provides a competitive advantage by enabling adoption while maintaining some control.

Current AI safety solutions primarily act as external filters, analyzing prompts and responses. This "black box" approach is ineffective against jailbreaks and adversarial attacks that manipulate the model's internal workings to generate malicious output from seemingly benign inputs, much like a building's gate security can't stop a resident from causing harm inside.

Even when air-gapped, commercial foundation models are fundamentally compromised for military use. Their training on public web data makes them vulnerable to "data poisoning," where adversaries can embed hidden "sleeper agents" that trigger harmful behavior on command, creating a massive security risk.